SUSE-SU-2014:0457-1: moderate: Security update for rubygem-actionpack-2_3
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Thu Mar 27 12:04:12 MDT 2014
SUSE Security Update: Security update for rubygem-actionpack-2_3
______________________________________________________________________________
Announcement ID: SUSE-SU-2014:0457-1
Rating: moderate
References: #864433 #864873
Cross-References: CVE-2014-0081
Affected Products:
SUSE Cloud 3
______________________________________________________________________________
An update that solves one vulnerability and has one errata
is now available.
Description:
Rubygem Actionpack was updated to fix a XSS vulnerability:
* CVE-2014-0081: XSS Vulnerability in
number_to_currency, number_to_percentage and
number_to_human.
Security Issue references:
* CVE-2014-0081
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0081
>
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Cloud 3:
zypper in -t patch sleclo30sp3-rubygem-actionpack-2_3-8992
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Cloud 3 (x86_64):
rubygem-actionpack-2_3-2.3.17-0.15.2
References:
http://support.novell.com/security/cve/CVE-2014-0081.html
https://bugzilla.novell.com/864433
https://bugzilla.novell.com/864873
http://download.suse.com/patch/finder/?keywords=9b9011921df3adb378f95a881be52dc5
More information about the sle-security-updates
mailing list